How are the «secureUrlList» and «excludedUrlList» arguments injected to the \Magento\Framework\Url\SecurityInfo's constructor?

ssl, url-security-info, excluded-url-list, https, secure-url-list, secure-url, url, security